hvac 2.2.0 flagging for vulnerability

[sfjkastello]

[email protected] > [email protected] > [email protected]

https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047

Fix: Upgrade certifi to version 2023.7.22 or higher.

[briantist]

We had already been using an unaffected version of certifi in our lock file since this PR at least:

• Drop Python 3.6 & 3.7, Add Python 3.11, bump some dependencies #1048

That should have been in hvac==2.0.0.

We don't specify certifi as a direct dependency of the package though, it may be possible that something else is in your environment or container constrained the package, or maybe it was already installed and satisfied all the version constraints in the env/container that you scanned with Snyk.

I'll close this out for now, if you think that's in error please let me know.